How to Prevent XSS in Web Rich Text
· β˜• 4 min read
1. How XSS Works and Several Common Attack Types An XSS attack is an attack that executes malicious scripts to steal a user’s login state, hijack a session, and so on. The input sources for malicious scripts include Cookies, Post forms, Get requests, HTTP header content, and more. We usually call a code fragment used for an XSS attack an XSS vector.

django-xss-cleaner
· β˜• 2 min read
django-xss-cleaner is a bleach-based Django XSSFilter toolkit that implements whitelist XSS filtering for GET and POST request parameters. The package ships with a set of built-in whitelisted HTML tags and attribute settings, and also supports custom extensions. Project address, https://github.com/shaowenchen/django-xss-cleaner 1. Installing and Configuring settings.py Add the middleware xss_cleaner.middlewares.CleanXssMiddleware to

The Era of Cloud Work
· β˜• 1 min read
Author: Wang Jianguo / Wu Bin Publication year: 2016-11-1 ISBN: 9787508668024 Notes: The book’s main point is that in the internet era, working from home and collaborating remotely is a better fit. From there it goes on to discuss how business owners and workers can harness this way of working, and the author offers some of his own thoughts.

Let's Learn Go -- (1) Background and Characteristics
· β˜• 3 min read
1. The Background of the Go Language The development of C/C++ did not keep pace with the advance of computing, and for over a decade no mainstream systems programming language suited to the era appeared. To solve this problem, Google developed a new programming language – Go. Google’s situation at the time:

Different Stages of a SaaS Development Team
· β˜• 6 min read
The team I am on is responsible for SaaS development. We have a few flagship SaaS products and also some supporting ones. The flagship SaaS products have complex architectures, large technical challenges, and heavy staffing, and they are the focus of our KPIs. But a flagship project cannot stay the flagship forever β€” projects have life cycles and phases.